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ABSTRACT 


This thesis formulates and solves a mixed-integer program to plan the reeovery of 
an eleetrical power transmission grid that has been damaged by a natural disaster or 
terrorist attack. The damage can be extensive and recovery can take weeks or months. 
An efficient recovery plan that maximizes the utilization of repair resources can help 
ensure swift restoration of services. 

The network recovery-planning model is implemented in GAMS (General 
Algebraic Modeling System) and uses CPLEX as the solver. An electrical grid based on 
IEEE’s 300-bus transmission network is used for testing. To simulate varying degrees of 
damage to the network, we choose up to 20% of the grid’s components to be placed out 
of service. Based on the availability of repair resources and penalties for unserved 
demand, the model produces a repair schedule that minimizes the cost of power shed. 

We demonstrate that for a network with up to 8% of its components damaged, the 
model can produce an optimal recovery plan within 20 minutes on a 2 GHz personal 
computer. Eor our largest test-case with 20% of network components damaged, the 
recovery plan is within 7% of optimal after 1 hour of solver time. 
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EXECUTIVE SUMMARY 


This thesis formulates and solves a mixed-integer program (MIP) to plan the 
reeovery of an eleetrieal power transmission grid that has been damaged. 

Electrical power grids span large geographical areas and, consequently, are hard 
to protect against malicious activities; they are also vulnerable to natural disasters. The 
formulation of a recovery plan after catastrophic and widespread damage to the power 
grid can be a complicated process. The complexity can be exacerbated by pressure on 
planning staff to produce a plan quickly. Decisions on which parts of the grid to repair in 
what order must be made while considering the availability of repair resources and 
spares, and the relative importance of customers affected by the service disruption. 

We develop a MIP called RECovery Optimization (RECOP) to aid in the 
recovery-planning process. RECOP accounts for the availability of repair resources and 
spares for damaged grid components, and schedules their allocation in order to obtain a 
recovery schedule that minimizes the economic cost of unmet demand for energy. If 
necessary, precedence relationships enforcing the relative orders in which components 
need to be repaired can be defined as part of the inputs to RECOP. These relationships 
can be used to reflect a requirement to restore certain sectors of the network first. 

We implement RECOP in the General Algebraic Modeling System (GAMS) and 
use CPEEX as the solver. An electrical grid based on IEEE’s 300-bus transmission 
network is used for testing. To simulate varying degrees of damage to the network, we 
choose up to 20% of the grid’s buses, lines and transformers to be placed out of service. 
We demonstrate that for a network with up to 8% of its components damaged, the model 
can produce an optimal recovery plan within 20 minutes on a 2 GHz personal computer. 
Eor our largest test-case with 20% of network components damaged, the recovery plan is 
within 7% of optimal after 1 hour of solver time. 

We also explore the use of Benders decomposition to solve RECOP, and the use 
of a heuristic to solve RECOP, at least approximately. In all our test cases. Benders 
decomposition takes at least as much time as the MIP requires to produce a solution of 
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the same or inferior quality. For the terrorist-attack scenarios, where relatively few 
components are damaged, the heuristic solutions are up to 40% worse in terms of energy 
shed compared to the MIP solutions. The difference in performance between the two 
solution methods narrows in hurricane-damage scenarios, however, where more 
components are damaged. In these cases, each heuristic solution obtained in ten seconds 
is within 10% of the solution obtained by solving the MIP directly for an hour. This 
shows the potential of the heuristic solution method for larger-sized problems to obtain 
“reasonable” solutions within a short period of time. 

We demonstrate that, although the number of components of an electrical grid 
that is damaged during a coordinated terrorist attack may be relatively small compared to 
the number damaged during a hurricane, the impact in terms of energy shed and 
economic costs could be larger. This is because terrorists can selectively target critical 
components that cannot be replaced immediately due to delivery and manufacturing lead- 
times for replacement parts. This highlights the potential impact of spares availability on 
grid recovery and underscores the need to keep a strategic inventory of critical 
components to facilitate quick restoration of the power grid. To this end, RECOP can be 
used as a tool to help evaluate the effectiveness of various mixes of inventories. 
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I. INTRODUCTION 


A. BACKGROUND 

This thesis formulates and solves a mixed-integer program (MIP) to plan the 
recovery of an electrical power transmission grid that has been damaged by a natural 
disaster or terrorist attack. The recovery plan takes into account the scarcity of repair 
resources and spares, and schedules their allocation in order to minimize the economic 
cost due to unmet energy demand. Alternative solution methods using heuristics and 
decomposition are also presented. 

Infrastructure networks, e.g., road, electricity and telecommunications networks, 
inherently span large geographical areas. Consequently, they are hard to protect and can 
be vulnerable to natural disasters, e.g., hurricanes and earthquakes, and to man-made 
attacks, e.g., terrorist attacks and war. One way to reduce a network’s vulnerability is to 
harden critical components. Salmeron et al. [2004] develop bilevel mathematical models 
that can be used to identify critical sets of a power grid’s components, such as generators, 
transmission lines and transformers; these components become prime candidates for 
hardening. 

However, if a power grid has already been damaged, this question arises: How 
should repair be carried out to minimize disruption of services to customers? The 
benefits of an efficient recovery process for the electric power grid cannot be over-stated 
due to the dependency of other industries on electrical power. The then-chairman of the 
Federal Reserve Board, Alan Greenspan, commented in November 2005 about the effects 
of Hurricane Katrina: “The combination of flooding, wind damage, and a lack of electric 
power also forced many crude oil refineries and natural gas processing plants to shut 
down” [Federal Reserve Board 2005]. A quick recovery from a blackout can minimize 
the impact on the public and the economy. 

Power-grid recovery planning is a process that involves power-system modeling 
and “strategy planning.” Power-system modeling ensures that the proposed recovery 
process does not inadvertently throw the system back into collapse due to unusual system 
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conditions and phenomena. This thesis focuses on strategy-planning, whieh guides the 
formulation of a recovery process in order to meet a given objective. Examples of such 
objectives include minimizing the total amount of energy shed, minimizing the duration 
of the restoration proeess or “priority restoration” of eritical customers such as those 
belonging to the health- and publie-services seetors. 

The formulation of a recovery plan after eatastrophie and widespread damage to 
an eleetrieal power grid is a eomplicated proeess. The eomplexity can be exacerbated by 
pressure on planning staff to produce a plan quickly. Decisions on the order in whieh 
repairs must be made have to take into account the repair-equipment and manpower 
resources available and the objeetive of the restoration. This is a dynamic problem as 
repair crews can move in from unaffected areas to help in the recovery work, or move out 
in response to greater needs elsewhere. 

An optimization-based decision-support system can help in scheduling the 
recovery plan. It can schedule repairs in order to minimize power-shedding over time, 
thereby limiting the impact of damage to the transmission grid on the grid’s eustomers. It 
ean also be used in a dynamie environment to track repairs and resourees, and to 
resehedule them as new information beeomes available. 

Non-trivial, real-world scenarios exist where such a tool may prove useful. For 
example. Hurricane Charley caused the Florida Power and Fight Company to mobilize 
11,200 workers and replace over 5,100 low-voltage transformers and 900 miles of wire 
[Florida Power and Fight Company 2004.] More reeently. Hurricane Rita knoeked out 
82% and 38% of transmission lines in southeastern Texas and southwestern Fouisiana, 
respectively [Entergy Corporation 2005.] Admittedly, these real-world problems are 
large in comparison with the 300-bus transmission network [IEEE 1993] used for testing 
our model. However, we show that our methods do solve problems defined on this 300- 
bus network in a reasonable amount of time: Thus, they provide a starting point for 
researeh into solving larger problems. 

In contrast to storm damage, a coordinated terrorist attack on an electrical grid 
may see more limited damage that may, nonetheless, be highly disruptive if the terrorists 
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can identify and destroy eritieal eomponents. Sueh components may inelude high- 
voltage transformers for whieh utilities usually keep few or no spares, beeause of their 
high eost and nominally high reliability. Long delivery or manufaeturing lead times for 
these eomponents, whieh may streteh over weeks or months, exacerbates the potential for 
disruption. Even if a national strategie inventory of eritieal, eomponents having long 
replaeement lead times is established [Eleetrie Power Researeh Institute 2003], a shortage 
or delay in the delivery of replaeement eomponents eannot be ruled out. Under this 
seenario, our reeovery optimization model ean help to determine whieh faeilities to repair 
first while awaiting delivery of additional spares neeessary for full network reeovery. 

The model is intended as a high-level, low-resolution reeovery-planning tool. It is 
not designed to produee detailed, hourly sehedules for eaeh individual resouree or pieee 
of equipment involved in the reeovery exereise. Rather, the model prioritizes the repair 
of damaged eomponents to ensure quick recovery while ensuring that resourees are 
available to earry out the repair. 

Existing literature on infrastrueture network reeovery planning is limited. Eeng 
and Wang [2003] deseribe an integer-programming model for seheduling the emergeney 
repair of highways damaged by an earthquake given that repairs are eonstrained by time 
and resources. The model foeuses on “reachability” for rescue within the first three days 
after an earthquake occurs. It also considers the minimization of the risk from after- 
shoeks on work-erews by the appropriate choice of a minimum-risk path. No network 
flow-balance or road-eapaeity eonstraints are eonsidered. Barbarosoglu and Arda [2004] 
formulate a multi-eommodity, multi-modal time-spaee network model to optimize the 
routing and seheduling of emergency-response vehieles in disaster-affeeted areas. While 
this model eonsiders the traffie-handling eapaeity of an area’s roads, it does not deal with 
the seheduling of the repair of these roads. Brown and Vassiliou [1993] introduee a 
deeision-support system which uses optimization methods, simulation, and the decision¬ 
maker’s judgment to assign tasks and resourees for the repair of publie works damaged 
by an earthquake. Only a simple, pure assignment model is used by that system. 
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B, THESIS OUTLINE 

Subsequent chapters in this thesis are organized as follows: Chapter II describes 
the mathematical formulation of the network recovery planning model. Chapter III 
reports results of the model applied to the IEEE 300-bus transmission network. Attempts 
to speed up solution times using heuristics and Benders decomposition are also described. 
Section IV provides conclusions and points out areas for future research. Appendix A 
describes the changes made to the IEEE transmission-network’s generation capacity to 
adapt it for our application. Appendices B and C present the data used in our hurricane- 
damage and terrorist-attack scenarios, respectively. Einally, Appendix D presents the 
algorithm used to implement the Benders decomposition of RECOP. 
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II. A MODEL FOR THE OPTIMIZED RECOVERY OF 
DAMAGED ELECTRICAL GRIDS 

A. OVERVIEW 

This chapter introduces the RECOP model (RECovery Optimization) developed 
to optimize reeovery of a damaged eleetrieal power grid. The model starts with the 
premise that some of the power grid’s components, e.g., buses, transmission lines, 
transformers, are damaged, resulting in power-shedding at various parts of the network. 
The objective of the model is to formulate a recovery plan that minimizes the monetary 
opportunity eost arising from this unmet demand over the repair-time horizon. 

The rate of network recovery depends on the number of grid components that are 
damaged and the size of the available pool of various types of repair resources and 
replacement components. Each type of repair resource may be viewed as a type of work 
team, defined by characteristies such as the number and eapability of the team’s workers, 
and the tools and machinery available to them. Each unit of a repair resource is therefore 
a re-useable asset that can be deployed repeatedly to repair damaged components. 
Replaeement eomponents are spare parts which, by their nature, can be used only onee. 
(These are typieally eritical components sueh as high-voltage transformers, whieh may 
have long replacement lead-times.) 

The recovery process is very dynamic; the “health” of the grid progressively 
improves as more components are repaired, and the availability of repair resources and 
replacement parts ean change over time. As such, the model’s repair-time horizon is sub¬ 
divided into a series of diserete time periods. Repairs start at the beginning of a time 
period with a eorresponding draw-down of applicable repair resourees and replaeement 
eomponents. Each repair is assumed to take an integral number of time periods after 
whieh the repair resourees are released for further repairs. 

The number of time periods and their duration are scenario-dependent. For 
example, a model dealing with the scheduling of work-crew for the repair of downed 
transmission lines may use 12-hour time-periods with a total of 28 periods to reflect a 
planning horizon of two weeks. 
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If necessary, precedence relationships enforcing the relative orders in which 
components need to be repaired can be defined as part of the inputs to the model. Such 
relationships can be used to reflect a requirement to restore certain sectors of the network 
first. This is the case, for example, when a sector supports other critical infrastructure 
such as public-health and sanitation services, or when damage to road infrastructure 
forces work-crews to concentrate their initial repair efforts on accessible parts of the 
network. 

The model output consists of a repair schedule by component and time period, 
resource utilization (parts and manpower), and the power flow and power shed in the grid 
at each stage of the recovery process. 

B, RECOVERY OPTIMIZATION MODEL 

RECOP is a linear MIP. Its core consists of a power-flow model that 
approximates the non-linear behavior of active power flows in a power grid. This 
approximation is adequate for a high-level, low-resolution model such as ours [Wood and 
Wollenberg 1996, p. 419.] For simplicity, we suppose that all loads are held constant 
over time: The model could be extended to incorporate load-duration curves through the 
introduction of partitioned time periods with distinct loads, but this is not explored here. 
Other parts of the RECOP model implement features described in Section A above. 
Additional modeling assumptions are discussed in Section C. The RECOP model 
follows: 

Indices and Index Sets: 

C set of customer classes, cg C 

T set of time periods, te E = (1,2,... | E |} 

N set of buses i,j& N 

N' a N subset of buses that are damaged 

N" cz N' subset of buses that are damaged and need spares for repair 

N‘^ N subset of buses that have a local load 
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N subset of buses that have a loeal generation eapability 

Acz NxN set of lines (this set ineludes transformers, whieh are modeled as 
lines in RECOP.) 

A' A subset of lines that are damaged 

A" d A' subset of lines that are damaged and need spares for repair 

R set of repair resourees, r e R 

R' set of spares, r'e R' 

R' c R' set of spares needed to repair bus i e N" 

R' j e R' set of spares needed to repair line i, j g A" 

dA'xA' pairs of damaged lines [{i,j),(p/)] where line {i,j) must be repaired 
before starting repair on line (i', j') 

dA'xN' pairs of damaged lines and buses [(i,7),0] where line (i,j) must be 
repaired before starting repair on bus i' 

P^^ dN'xA' pairs of damaged buses and lines where bus i must be 

repaired before starting repair on line {i', /) 

P^^ dN'xN' pairs of damaged buses where bus i must be repaired before 

starting repair on bus i' 

Parameters and “(units)”, if applicable: 

h duration (hours) of each time period t 

p weight ($) for penalizing the objective function value if damaged 

buses or lines are not repaired 

change in the quantity of type r repair resource available at the 
beginning of time t 
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change in the quantity of type r' replaeement eomponent available 
at the beginning of time t 

load at bus /g N‘^ from customer of class cg C (MW) 


1 if ZG N\ 
0 otherwise 

1 ifzG N\ 
0 otherwise 


1 if z G N' and (z, j) g A, 
0 otherwise 

1 ify'G N' and {i,j)& A, 
0 otherwise 


1 if (z,7)g a ', 
0 otherwise 


transmission capacity for line {i,j)& A (MW) 


V. . ' 

i,J,t 4,r 


V. . ' 

i,J,t ,t,r 


for bus z G N' where (z,y) g A, v”^.^ ^ equals u. ■ if repair that 
started on the bus during time period t' has been completed by 
period t (MW), t' <t. ^ ^ equals zero if bus z g N' is awaiting 

or under repair. Similarly for bus y g N' , where (z, y) g A. 

for line {i,j)&A', equals ■ during time period t if repair 

that started on the line during period t' has been eompleted by time 
t(MW), t'<t. 

for bus ZG N' , equals the number of units of type r resouree 

used to repair the bus during time period t if the repair effort 
started during period t', t' <t. 
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f. for line (/, j) g A', equals the number of units of type r 

resouree used to repair the line during time period t if the repair 
effort started during period t', t'<t. 

for bus z G N', equals the number of time periods required to 
repair the bus using repair resource re R 

T. . ^ for line (z, j) g A ', 7 . . ^ equals the number of time periods required 

to repair the line using repair resource re R 

for bus ZG N", /i" , equals the number of units of type r' spare 
needed to repair the bus, re R' 

/i. . for line (z, j) e A", A. . equals the number of units of type r' spare 

needed to repair the line, re R'j 

earliest time period to start repair on damaged bus z g N' 

J earliest time period to start repair on damaged line (z, j)e A' 

p ~^, unit cost of energy shed at node z g N" incurred by customer of 

class ceC during time period t ($/MWh) 

(J. 

B. J susceptance of line (z, j) e A (per unit) derived from ^ ^ 

^i,j ^i,i 

where o. ■ and (p. ■ are the per unit reactance and resistance of line 
(z, j)e A, respectively 

uf generation capacity at bus z g N' (MW) 

M defining P and B as the maximum line-capacity and line- 

susceptance, respectively, and 7r= 3.142 radians, then 
M = P + Btt 
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Decision variables and “(units)”, where applicable: 


yij.t 


X: 


i,t,r 


X: 




(lu 


tij,t 


power flow from bus i to bus j during time period t (MW) 

[l if repair on bus z£ N' starts during time period t using resouce r&R, 
[O otherwise 

1 if repair on line (/,y)e A' starts during time period t using resource 

< r&R, 

0 otherwise 

1 if repair on bus zg N' has been eompleted during or before 

< time period t, 

0 otherwise 

1 if repair on line A' has been eompleted during or before 

< time period t, 

0 otherwise 


load shed at bus i€:N‘‘ by customer of class cg C during time 
period t (MW) 

g., power generation at bus z g N' during time period t (MW) 


d ., phase angle at bus z g N during time period t (radians) 

Formulation: (Remark: All units above are converted into per-unit values for a 
base load of 100 MW.) 


RECOP: 


min 

x,q,y,s,fl,g 


ieN^ ceC teT 


P_ 

\T\ 


isN' teT 


^ Z 

I ^ \ {iJ)eA’ teT 


(1) 


s.t. 


Power-flow balance: 


Z yj,u 

(J,i)eA 


{iJ)eA ceC 


ceC 


( 2 ) 
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Phase-angle eonstraints: 


y,u 4(1 - o +III (1 - 4,)+4 (1 - )} 

V(/,7)g a, tsT 

Capaeity of damaged ares: 

H ^iij)^ A', tGT 

t'eT\t'<t reR 

y. . ^ ^ ^ V. . ' 

j j i. i.f -t 

t€.T\t<t reR 




A', t&T 


Capaeity of arcs whose origin nodes i have been damaged: 
=: E E4/..X,v Xi,y)s A, l€ N\ l€ T 


t'eT\t'<t reR 


Xit'r A, ie N', teT 


t'eT\t'<t reR 


Capacity of arcs whose destination nodes j have been damaged: 
yij,t ^ Z Z<7,xX^v ^(h7)e A, jeN',teT 

t'eT\t'<t reR 

y.u ^ - Z Z<y/.X.> A, j^N',t^T 


(3) 

(4) 

(5) 

( 6 ) 

(V) 

( 8 ) 


(9) 

( 10 ) 


t'eT\t'<t reR 


Capacity of undamaged arcs: 

-Uij ^ yij,t ^ u, j V(/, j)eA\A',teT 

Maximum generating-unit output if connecting buses are undamaged: 
0<g., <Mf VzG (A^"nA^\A^'), t&T 

Maximum generating-unit output if connecting buses are damaged: 
0<g,,<ufql ^ie(N^nN'), t^T 


( 11 ) 


( 12 ) 


(13) 
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Force binary variables and ^, y(to be zero if damaged buses and lines, 
respectively, have yet to be repaired at time t\ 


II 

M 

V/s N’, te T 

(14) 

t'eT\t'<t-tl\ 

reR 


= z 

Tj^i,j/,r A\ teT 

(15) 




Repair-resource eonstraints: 


{iJ)eA' t'E.T\t'<t 


/ V 


+ Z Z S Z A';/ (eT (16) 


ieN' t'sT\t'<t 




Spare constraints: 


Z Z Z\/.^>+ Z Kr Z Zv,.- Z '^r'eR', teT 

{iJ)eA"\r'eR-j t'eT\t'<treR ieN"\r'€R- t'eT\t'<treR t'€T\t'<t 


Repair line (/, j) before line (f, f ): 


(17) 


Z ^z Z \jyr V[(/,7),(r,/)]GP"", t^T 

reR t'eT\t'<(t-T- - 


t'sT\t'<t reR 


(18) 


Repair line {i,j) before bus 


ZZ<.>^Z Z Vj/,, V[(,P-*", (S 7- 


t'eT\t'<t reR reR t'eT\t'<{t-Ti j 

Repair bus i before line {i ',/): 


(19) 


Z ^Z Z V[/,(r,/)]GR^", t^T 

t'eT\t'<t reR reR t'eT\t'<(t-T"^ ) 

Repair bus i before bus 

z z<.v ^z z A. T 

l'eT\l'<treR reR t'eT\t'<(t-T" ) 


( 20 ) 


( 21 ) 
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Repair each damaged bus and line at most once: 


teT reR 

, <1 VzeA' 

(22) 

tsT rsR 

,,^<1 V(z,7 )G^' 

(23) 


Earliest time period to start repair of damaged buses and lines respectively: 
xf, ^ = 0 Vz e r e R, t e r 11 

=0 A',r^ R,t^T\t< t.j 

Power shed must not exceed demand: 

0 < 57 ^ ^ ^ \/i& N‘‘, ce C, t&T 

Binary variables: 
x",^e{0,l} \/i& N',re R, te T 
X. G {0,1} V(z, j) & A',r& R,t&T 
^",£{ 0 , 1 } Vi^N',t^T 

a', t&T 


(24) 

(25) 

(26) 

(27) 

(28) 

(29) 

(30) 


C. MODELING ASSUMPTIONS AND COMMENTS 

1. Optimal Dispatch of Power 

The RECOP power-flow model approximates an optimal dispatch of power 
through the electrical grid during each time period, i.e., the dispatch that a system 
operator would make given complete data on the state of repair in the network. 

2, Objective Function 

We suppose that power-shedding costs are much higher than generation costs and 
have therefore ignored generation costs in the objective function. 
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Most power grids have some level of redundaney meaning that during the normal 
operation of the grid, a few downed eomponents may not lead to power-shedding. To 
ensure that all damaged buses and lines are repaired even if their restoration to serviee 
has no impaet on the amount of power shed, we inelude the following penalty terms in 
the objeetive funetion: 


P_ 

T 


EEC 

ieN' teT 


I ^ I (iJ)eA’ teT 


3, Admittance Constraints 

Admittanee (phase-angle) eonstraints should only be enforeed for elosed lines 
(i.e., lines eonnected to the system), whieh mandates that the lines and their assoeiated 
end-buses are in working eondition. These requirements are implemented by eonstraints 
(3) and (4). Lines that are working have the right-hand-side of eonstraints (3) and (4) set 
to zero. If a line or either of its two end-buses are damaged and have yet to be repaired, 
the upper and lower bound limits on (3) and (4) effeetively drop the phase-angle 
eonstraints. 


4. Power-Shedding 

The power-flow model assumes that power-shedding can range from 0 

MW to the nominal demand for power, i.e., there is no restrietion on the minimum viable 
supply to a load. We assume that this eould be aehieved by implementing seleetive or 
rolling-blaekouts to the individual elasses of eustomers that eomprise the load, so that 
power-flow balanee is always maintained in the grid. 

5. Repair-Resource and Spares 

Travel times for repair-resourees (e.g., work erew) between repair loeations are 
ignored, i.e., when repairs on a grid eomponent are eompleted at the end of a time period, 
the assoeiated repair resourees are immediately available at the beginning of the next 
time period for the repair of any eomponent. Similarly, transportation times for spares to 
reaeh their intended destinations are assumed to be zero. However, sinee transportation 
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of some components (such as large-sized high-voltage transformers) can take a long time, 
we assume this effect is accounted for in the delivery lead-time of these components. 

6. Bus, Line and Transformer Capacity during Repair 

Buses and lines that are damaged or under repair have zero capacity. They revert 
to their nominal capacities at the beginning of the time period immediately following the 
time period during which repairs are completed. 

All lines that are connected to a damaged bus have zero power flow through them 
until the bus has been repaired. 

D, IEEE 300-BUS TEST NETWORK DATA 

This section describes the assumptions and modifications necessary to adapt the 
IEEE 300-bus network data for testing RECOP. 

1. Network Generation Capacity 

The total load (which is assumed to be constant over time) in the original IEEE 
test network exceeds generation capacity by 46 MW. To present a more realistic test case 
for RECOP, additional generation capacities are added to the system so that total 
generation capacity exceeds total load by 15%; the changes to the generation capacities 
are listed in Appendix A. Total load and generation capacity are therefore 23.8 GW and 
27.4 GW, respectively. 

2. Line and Transformer Capacities 

As line and transformer capacities are not available in the IEEE data-set, 
estimates are obtained based on the following procedure: 

1. Estimate line or transformer capacity from Table 1 based on bus voltages 

2. Increase IEEE line or transformer IEEE power-flow solution values (provided 
by IEEE dataset with all components intact) by 20% 

3. Assume the higher of (1) and (2) to be the rated capacity of the line or 
transformer. 
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Bus voltage 
(kV) 

Estimated line capacity 
(MW) 

Estimated transformer 
capacity (MW) 

[use high-voltage bus] 

6.6 

10 

10 

13.8 

10 

10 

20.0 

10 

10 

66.0 

50 

50 

115.0 

150 

150 

138.0 

200 

200 

230.0 

500 

500 

345.0 

1,000 

1,000 


Table 1. Estimated transformer and line eapaeities based on bus voltages. 

E, RECOP OUTPUT 

To illustrate the typieal output from RECOP, we assume a hypothetieal seenario 
in whieh five buses and five lines of the 300-bus test network are damaged. Two of these 
damaged lines require a spare for repair, whieh we eall “HVT.” We suppose that no 
HVT is kept in inventory and that one unit ean be delivered during the fifth time-period 
while a seeond unit ean be delivered during the seventh. Eaeh time-period lasts a day. 
Work-erews of types rl, r2 and r3 are available to carry out the repair work. These 
crews work in shifts and one team of rl and r2 and two teams of r3 are available at any 
time during a 24-hour time-period. Eigures 1 and 2 display results. 
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Damaged 

component 

Time period (day) 

1 

2 

3 

4 

5 

6 

7 

8 

9 

Bus 37 

r2 

V 

V 

V 

V 

V 

V 

V 

V 

Bus 41 


r2 

V 

V 

V 

V 

V 

V 

V 

Bus 44 



r2 

V 

V 

V 

V 

V 

V 

Bus 51 




r2 

V 

V 

V 

V 

V 

Bus 92 

r3 

V 

V 

V 

V 

V 

V 

Line (3, 4) 







r3 + HVT 

V 

Line (41, 49) 




rl 

V 

V 

V 

Line (42, 46) 

rl 




V 

V 

V 

Line (45, 46) 





r3 + HVT 

V 

V 

V 

Line (61,62) 





r2 


V 

V 

V 


Figure 1. Optimal repair schedule for hypothetical scenario. Cells with a diagonal line 
indicate components are awaiting repair. Labels rl, r2 and r3 indicate the 
type of work-crew used to repair the damaged component. Label HVT shows 
the usage of consumable spare HVT. Cells with a check indicate that repairs 
have been completed on the component. For example, repair of damaged line 
(45, 46) starts during time-period five utilizing work-crew r3. It lasts for two 
time-periods and uses one unit of HVT. 
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Power shed (MW) versus time (days) 



Figure 2. Chart showing the reduetion in power-shedding as repair progresses with 
time. Note that the power shed drops to zero before repair eompletion due to 
excess capacity in the network. 
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III. RESULTS 


A. OVERVIEW 

We test RECOP on two scenarios that are both based on the IEEE 300-bus test 
network described previously. 

The first scenario simulates relatively large-scale damage to the electrical grid 
caused by a storm or hurricane. Damage is assumed to be confined to exposed and 
vulnerable parts of the grid such as transmission towers and lines. We suppose that 
components and cables for the repair of damaged equipment are in adequate supply and 
do not place a constraint on the rate of the recovery process. Instead, scheduling of repair 
resources such as work-crew and repair machinery, while maintaining repair-precedence 
relationships, shall be the main focus. 

The second scenario depicts a coordinated terrorist attack on the power grid. 
While the physical damage is likely to be less extensive than that caused by a storm, the 
impact can be larger as the terrorists can selectively destroy critical targets. These can 
include system components such as high-voltage transformers with long replacement 
lead-times. If the number of such destroyed components exceeds the number of available 
spares, a decision would have to be made regarding which parts of the grid are to be 
repaired first while waiting for the shortfall to be filled. In this scenario, we investigate 
the use of our model as a tool for repair-resource scheduling and repair prioritization 
when demand for replacement parts exceeds availability. 

The objective of RECOP is to minimize the total cost of power shed over the 
recovery-time horizon, but determining the cost per kilowatt-hour of unserved demand 
for each of the loads on the grid is a complex matter: The cost varies by customer class 
type (commercial, industrial, residential etc), season, duration of outage and other factors. 
For the purpose of this thesis, we assume, for simplicity, an outage cost of $7,500/MWh 
for all loads. This outage cost is based on a report by ICE Consulting [2003] on the 
economic cost of the Northeastern blackout of August 2003. 
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The model is implemented using the General Algebraic Modeling System 
(GAMS) [2004] and solved with CPLEX 9.0 [2005.] Tests are carried out on a 2 GHz 
personal computer having 1 GB of RAM and running under the Microsoft Windows 2000 
Professional operating system. 

B, SCENARIO 1: HURRICANE DAMAGE 

Utilities in hurricane-prone areas are usually well-equipped to deal with storm- 
induced damage, and recovery is often relatively swift. For example, Entergy 
Corporation [2005] was able to restore power to over three quarters of their customers 
affected by Hurricane Rita within two weeks. For our modest-sized test case, we suppose 
a recovery-time horizon of up to 15 days with each time period lasting one day. 

To examine the impact of storms having varying severity, we randomly select 4% 
to 20% of the grid’s buses and lines to be downed. Generators are assumed to be well- 
protected and cannot be damaged although they can be disconnected from the grid if their 
associated buses are damaged. 

For network restoration, we suppose that the utility has a set of repair resources of 
types rl, r2 and r3, each with different repair capabilities and availability that may 
change over time. We assume that each damaged component requires one to three units 
of any one type of resource for repair, and randomly assign a repair time of one to three 
days. Appendix B contains detailed lists of the damaged components, the resource 
availability over time, and also the time and the number of resource units required to 
repair each damaged component. Precedence relationships are also described. 
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All cases are eonfigured in GAMS to solve until a relative optimality gap of 1% 
or less is aehieved [GAMS/CPLEX 2003], or until the solver time reaehes one hour, 
whiehever oecurs first. Table 2 presents results. 


Pereentage 
damaged 
(and number) 

Optimality 
gap (%) 

Maximum 
power shed 
(MW) 

Energy shed 
(GWh) 

Cost of 
unserved 
demand ($b) 

Reeovery 

duration 

(days) 

4% (28) 

1.0 

2,713 

174 

1.3 

8 

8 % (57) 

1.0 

4,912 

418 

3.1 

9 

12% (85) 

1.8 

6,998 

670 

5.0 

9 

16% (114) 

3.7 

9,788 

999 

7.5 

11 

20% (141) 

7.0 

11,937 

1,376 

10.3 

12 


Table 2. Impaet of five different levels of damage on the grid due to a hurricane. 

“Pereentage damaged” indieates the proportion of buses and lines in the grid 
that are damaged; the numbers in parentheses indieate the aetual number of 
damaged eomponents. Maximum power shed indieates load shedding 
immediately after the hurrieane and assumes that the undamaged portion of 
the grid is stabilized and operational. Energy shed measures eumulative load 
lost until system repair is eomplete. 

C. SCENARIO 2: TERRORIST ATTACK 

We depiet a eoordinated terrorist attaek on the power grid in this seenario. One of 
the easiest terrorist targets eould be high-tension transmission towers and lines in remote 
areas. However, utilities regularly deal with damage to sueh infrastructure resulting from 
weather or malieious aetivities, and repairs ean usually be aeeomplished quiekly. We 
therefore suppose a smart enemy that will ehoose to target other, more eritieal 
eomponents of the network in order to ereate more extensive disruptions. Some of these 
targets may inelude eritieal equipment with limited spares and long delivery lead-times. 
The Congressional Researeh Serviee [2004] wrote; 

Of the transmission system’s physieal infrastrueture, high-voltage (HV) 
transformers are arguably the most eritioal eomponent. Utilities rarely 
experienee loss of an individual HV transformer, but reeovery from sueh a 
loss takes months if no spare is available. 

We therefore suppose a seenario in whieh the terrorists eoneentrate their attaeks 
on high-voltage transformers and buses, and that the terrorists try to maximize the 
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disruption that they can cause by “shortlisting” as potential targets only those 
transformers with at least 400 MW of capacity, and buses with local generation capacity 
or loads. We assume that up to 20 randomly chosen buses or transformers from the 
terrorists’ shortlist are damaged during a coordinated attack, and that each damaged bus 
or transformer requires one unit of replacement part, named si and s2, for repair (or 
replacement), respectively. A limited number of si and s2 parts are kept as spares and 
are available for immediate use, but once these are consumed obtaining additional units 
incurs delivery or manufacturing lead time. The availability of these parts over time is 
summarized in Table 3. Appendix C contains detailed lists of the damaged components, 
the resource availability over time, and the time and resources required to repair each 
damaged component. 


Component 

Units in 
inventory 

Units of components delivered at the start of each week 

123456789 10 

si 

2 

0 

0 

2 

2 

4 

0 

0 

0 

0 

0 

s2 

2 

0 

0 

0 

0 

0 

2 

0 

2 

0 

4 


Table 3. Number of spare parts in inventory and the number of additional units that 
can be delivered over time. 

We assume that repairs to a high-voltage transformer take four weeks once parts 
become available. This is loosely based on data provided by IEEE [1996], which states a 
repair time of 768 hours. Eor buses, we suppose that repairs will take two weeks. 
Einally, we assume that repair resources such as work-crew and machinery are available 
in abundance and do not place a constraint on the rate of recovery. This is reasonable as 
the number of damaged components is small and there is ample time to mobilize the 
necessary crews and machinery while awaiting arrival of the spares to commence repairs. 

All test-cases are configured in GAMS to solve with a 1% relative optimality gap, 
or until the solver time reaches one hour, whichever occurs earlier. Table 4 presents the 
results. 
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Number of 
components 
damaged 

Optimality 
gap (%) 

Maximum 
power shed 
(MW) 

Energy shed 
(GWh) 

Cost of 
unserved 
demand ($b) 

Recovery 

duration 

(weeks) 

4 

0.0 

579 

194 

1.5 

4 

8 

0.0 

1,314 

544 

4.1 

9 

12 

0.0 

1,648 

846 

6.4 

11 

16 

0.8 

2,293 

1,329 

10.0 

13 

20 

0.9 

3,865 

2,425 

18.2 

13 


Table 4. Impact of five different levels of damage on the grid due to a terrorist attack. 

Maximum power shed indicates load shedding immediately after the terrorist 
attack and assumes that the undamaged portion of the grid is stabilized and 
operational. Energy shed measures cumulative load lost until system repair is 
complete. 

The number of grid components that are damaged in the terrorist-attack scenario 
is a fraction of that assumed in our hurricane-damage scenario. Not surprisingly, the 
maximum power shed is also significantly lower at about 20% to 30% of the level due to 
hurricane damage. However, the impact of the terrorist attack in terms of energy shed 
(and therefore, economic cost) is much greater due to the prolonged recovery period. In 
these scenarios, the economic impact of a terrorist attack that damages just eight critical 
components exceeds that from a large storm that causes damage to eight percent of the 
grid. If the spares were delivered over a longer timeframe, measured in months rather 
than weeks, the economic consequences would be even larger. This highlights the 
potential impact of spares availability on grid recovery and underscores the need to keep 
a strategic inventory of critical components to facilitate quick restoration of the power 
grid. To this end, RECOP can be used as a tool to help evaluate the effectiveness of 
various mixes of inventories. 

D, RECOP SOLUTION SPEED AND QUALITY 

To obtain a good initial, upper bound to RECOP when solved directly with the 
MIP, we set its initial feasible integer solution using results from the heuristic solution 
procedure described in Section E. Tables 5 and 6 present the solution times and 
optimality gaps for out test cases. 
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Percentage of components 
damaged (and number) 

Optimality 
gap (%) 

Solver time 
(sec) 

4% (28) 

1.0 

230 

8 % (57) 

1.0 

950 

12% (85) 

1.8 

3,600 

1.5 

7,200 

16% (114) 

3.7 

3,600 

3.4 

7,200 

20% (141) 

7.0 

3,600 

6.1 

7,200 


Table 5. RECOP optimality gaps and solution times for the hurricane-damage 
scenarios. 


Number of components 
damaged 

Optimality 
gap (%) 

Solver time 
(sec) 

4 

0.0 

5 

8 

0.0 

10 

12 

0.0 

120 

16 

0.8 

340 

20 

0.9 

480 


Table 6. RECOP optimality gaps and solution times for the terrorist-attack scenarios. 

Note that for the terrorist-attack scenarios, which have relatively few binary 
decision variables, optimal or near-optimal solutions are obtained within 480 seconds. 
The NP-hard nature of RECOP becomes apparent in the hurricane-damage scenarios, 
where the optimality gap remains at 6.1% after two hours of solver time for the largest 
test-case with 20% of network components damaged. 

In the following sections, we present two alternative methods to solving RECOP, 
at least approximately, and compare the solutions obtained using these methods to those 
obtained by solving the MIP directly. 
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E, HEURISTIC SOLUTION 

After some manipulation, RECOP ean be stated in standard form as: 

RECOP: min -cx + cj 

x.y 

s.t. Ax <r 
Bx + Cy = d 
X binary, _y > 0 

where y represents generation outputs, load-shedding, power flows and phase angles 
(original g,s~,y and ^variables, respeetively), and where x represents bus- and line- 
repair variables (original x", x, q" and q variables, respeetively.) 

We ean solve RECOP heuristieally in a two-stage proeess. Firstly, we formulate 
and solve the following Heuristie sub-model-1 (HI-RECOP): 

HI-RECOP: max fx 

X 

s.t. Ax<r 

X binary 

where / represents heuristie weights for the relative importanee of repairing eaeh of the 
damaged buses and lines in the grid. For buses, we assign weights equal to the bus’s 
loeal generation eapaeity plus the eapaeity of all its ineident lines. Fines are assigned 
weights equal to their eapaeities. We then solve HI-RECOP to obtain x . 

Stage two of the heuristie simply solves: 

H2-RECOP: min cy 

y 

S.t. Bx + Cy = d 
y>0 

H2-RECOP therefore obtains the minimum-eost, feasible power flow based on 
the reeovery plan given by x . 

The heuristie solution proeedure for RECOP is implemented in GAMS and solved 
using CPEEX. For all test eases, in both seenarios, feasible solutions are obtained within 
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10 seconds. We compare the quality of these solutions to those from the MIP 
formulation in Section G. 

F. BENDERS DECOMPOSITION OF RECOP 

RECOP has a bi-level structure that makes the model suitable for the application 
of Benders decomposition [Benders 1962]; this is a well-known technique for solving 
MlPs. The first level specifies the damage inflicted on the network, which is modeled 
through binary decision variables. The second level is a continuous network-flow model 
that determines the electrical power-flow through the damaged network. Since the 
second-level, continuous model is linear, it satisfies Benders’ requirement for convexity 
in the subproblem. 

Using the notation from the previous section, the subproblem (SP) for the 
Benders-decomposition implementation of RECOP may be written as: 

SP^(x^): min cy [dual variables] 

y 

s.t. Cy = d-Bx^ 

T>0 

where represents the dual variables of the corresponding constraints and k represents 
the iteration counter of the Benders Decomposition Algorithm (BDA), which is presented 
in Appendix D. We solve SP to obtain the optimal values for The first 

iteration of BDA uses x obtained from HI-RECOP as input, in order to provide a good 
initial upper bound on the optimal objective value for the full problem. 

The “master problem” (MP) for the Benders decomposition takes the form: 

MP^: min z 

x,z 

s.t. z>-c'x.+Jr.(d-Bx) i = \,2,...,k 
Ax<r 
X binary 
z unconstrained 

where i indexes the constraints at a given iteration of BDA. 
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Figure 3 shows the sequence of lower and upper bounds (LB and UB, 
respectively) generated by BDA for the terrorist-attack scenario with eight components 
damaged. Convergence is rapid (21 iterations, 40 seconds), and the optimal recovery 
plan produced by BDA matches that produced by solving RECOP directly using the MIP. 
Figure 4 shows the bounds for the hurricane-damage scenario with 8% of components 
damaged. Solution time is one hour with 631 iterations. For our largest test case with 
20% of components damaged, convergence is slow and a significant optimality gap of 
about 20% remains after one hour and 311 iterations; Figure 5 shows detailed results. 


Bounds versus Iteration 



Iteration 

Figure 3. Convergence of BDA upper and lower bounds for terrorist-attack scenario 
with eight components damaged. Solution time is 40 seconds with 21 
iterations. Initial lower-bounds are negative and have been truncated from 
the chart for clarity. 
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Bounds versus Iteration 



Figure 4. Convergence of BDA upper and lower bounds for hurricane-damage scenario 
with 8% of grid components damaged. Solution time is one hour with 631 
iterations. Initial lower-bounds are negative and have been truncated from 
the chart for clarity. 


Bounds versus Iteration 



Figure 5. Convergence of BDA upper and lower bounds for hurricane-damage scenario 
with 20% of grid components damaged. Solution time is one hour with 311 
iterations. Initial lower-bounds are negative and have been truncated from 
the chart for clarity. 
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G. COMPARISON OF SOLUTION METHODS AND TIMES 

This section compares the energy shed over the repair horizon, i.e., solution 
quality, and solution times, for solutions obtained for RECOP through the MIP, Benders 
decomposition and the heuristic. Figures 6 and 7 present the results for the hurricane- 
damage and terrorist-attack scenarios, respectively. 


Hurricane-Damage Scenario 

Energy Shed (GW) versus Percentage Damage and Solution Method 



Figure 6. Energy shed and solution times for the hurricane-damage scenarios solved 
using MIP, Benders decomposition and a heuristic. Percentages along the 
horizontal axis indicate the proportion of grid components damaged. 
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Terrorist-Attack Scenario 

Energy Shed (GW) versus Number of Components Damaged and Soiution Method 



Figure 7. Energy shed and solution times for the terrorist-attaek scenarios solved using 
MIP, Benders decomposition and a heuristic. Numbers along the horizontal 
axis indicate the number of grid components damaged. 

It is apparent from Figures 6 and 7 that solving the MIP directly yields the best 
solution quality for both scenarios. Benders decomposition does not fare as well, taking 
at least as much time as the MIP to produce a solution of the same or inferior quality. 
Approximately solving RECOP by the heuristic fares worst in terms of solution quality. 
However, the heuristic achieves a good feasible solution quickly: In the hurricane- 
damage scenarios, heuristic solutions obtained in ten seconds are within 10% of that 
obtained by solving the MIP directly for an hour. The gap between the heuristic and MIP 
solution methods widens to a maximum of 40% in the terrorist-attack scenarios, where 
relatively few components are damaged. In these cases, the problem is small enough to 
be solved efficiently by the MIP. But, given an electrical grid that has thousands of 
buses, instead of the 300 in our test network, the heuristic solution procedure may be the 
most viable option in practice. 


30 




IV. CONCLUSIONS AND FUTURE WORK 


This thesis has formulated and solved a mixed-integer RECovery Optimization 
program (RECOP) to plan the recovery of an electrical power grid that has been damaged 
by a natural disaster or terrorist attack. The recovery plan takes into account the 
availability of repair resources and spares, and schedules the allocation of both in order to 
minimize the amount of unmet demand for energy over the planning horizon. 

We implement RECOP in GAMS and use CPLEX as the solver. An electrical 
grid based on IEEE’s 300-bus transmission network is used for testing. To simulate 
varying degrees of damage to the network, we choose up to 20% of the grid’s buses, lines 
and transformers to be placed out of service. We demonstrate that RECOP can produce a 
recovery plan to minimize power-shedding costs that is within 7% of optimal within an 
hour. This result is obtained on a 2 GHz personal computer with 1 GB of RAM. 

Additionally, we explore using a heuristic and Benders decomposition to solve 
RECOP, at least approximately. In all test cases. Benders decomposition takes at least as 
much time as the MIP requires to produce a solution of the same or inferior quality. For 
the terrorist-attack scenarios, where relatively few components are damaged, the heuristic 
solutions are up to 40% worse in terms of energy shed compared to the MIP solutions. 
The difference in performance between these two solution methods narrows in hurricane- 
damage scenarios, however, where more components are damaged. In these cases, each 
heuristic solution obtained in ten seconds is within 10% of the solution obtained by 
solving the MIP, given a one-hour time limit. This shows the potential of the heuristic 
solution method for larger-sized problems to obtain “reasonable” solutions within a short 
period of time. However, more computational trials using randomized sets of damaged 
buses and lines are required to understand the impact of input data on the variability of 
RECOP run times and the quality of heuristic solutions. 

We demonstrate that, although the number of grid components that might be 
damaged in a coordinated terrorist attack may be relatively small compared to the number 
damaged by a hurricane, the impact in terms of energy shed and economic costs could be 
larger. This is true because terrorists can selectively target critical components that 
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cannot be replaced immediately due to delivery and manufaeturing lead-times for 
replacement parts. This point highlights the potential impaet of spares availability on 
grid recovery and underseores the need to keep a strategic inventory of eritieal 
eomponents to facilitate quiek restoration of the power grid. To this end, RECOP can be 
used as a tool to help evaluate the effeetiveness of various mixes of inventories. 

Areas for further researeh inelude: 

1. Refining the Benders deeomposition algorithm to improve its 
eomputational speed and quality. 

2. Developing more advaneed heuristies to improve solution quality. This 
may inelude determining better weights to prioritize the reeovery of damaged 
eomponents, and an iterative solution approaeh to repeatedly refine the reeovery plan 
based on previous solutions. 

3. Ineorporating alternative objeetive funetions in RECOP. Currently, the 
aim is to minimize the eost of energy shed over the reeovery time-horizon. Other 
plausible objeetives eould be to minimize the reeovery time or to ensure that, for 
example, 90% of affeeted customers have their power restored within a eertain period of 
time. Additionally, if a base load of eritieal users exist, the model eould be modified to 
plan the reeovery proeess sueh that these users have their power restored first, before the 
seope of the reeovery work is expanded to other affected parts of the grid. 

4. Testing on real-world problems. 

5. Extending the basie methodology to reeovery-planning for other eritieal 
infrastrueture systems (e.g., a road network following an earthquake.) 

6 . Extending the model to ineorporate dependeneies between infrastruetures. 
For example, if both a road network and a power grid in an area are damaged, repairs to 
eertain damaged eomponents of the grid may not be able to eommenee until road aeeess 
to these eomponents is restored. 
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APPENDIX A. IEEE 300-BUS NETWORK GENERATION 

CAPACITY 


The table below lists the ehanges made to the generation capaeities at some of the 
buses of the IEEE [1993] 300-bus network. 


Bus 

Original generation 
capacity (MW) 

Revised generation 
capacity (MW) 

37 

0 

500 

41 

0 

300 

51 

5 

150 

108 

117 

150 

126 

0 

500 

128 

0 

800 

130 

0 

1,000 

143 

696 

1,000 

3054 

50 

90 
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APPENDIX B. DATA FOR HURRICANE-DAMAGE SCENARIOS 


A. REPAIR-RESOURCE AVAILABILITY 

Ten units each of rl, r2 and r3 are introduced into the pool of available repair- 
resources at the start of the first, fourth and eighth time-periods, respectively. 

B. LIST OF DAMAGED BUSES AND LINES AND REPAIR PRECEDANCE 

RELATIONSHIPS 

1. Scenario with 4% of Components Damaged 

Damaged buses: 1, 2, 3, 4, 7, 17, 62, 69, 77, 79, 80 and 130. 

Damaged lines (ij): (1, 5), (2, 3), (2, 8), (4, 16), (5, 9), (7, 131), (8, 11), (8, 14), 
(9, 11), (14, 15), (15, 16), (15, 17), (16, 42), (89, 91), (90, 92) and (92, 103). 

Pairs of damaged buses [z, z] where bus z must be repaired before starting repair 
on bus z': [1,2], [2, 3] and [3,4]. 

Pairs of damaged lines where line {i,j) must be repaired before 

starting repair on line {i'jy. [(1, 5), (2, 3)], [(2, 3), (2, 8)] and [(2, 8), (4, 16)]. 

2. Scenario with 8% of Components Damaged 

Damaged buses: 1, 2, 3, 4, 7, 9, 17, 19, 20, 21, 22, 62, 69, 77, 79, 80, 125, 126, 
130, 144, 151, 158, 167 and 170. 

Damaged lines (1, 5), (2, 3), (2, 8), (3, 19), (4, 16), (5, 9), (7, 131), (8, 11), 
(8, 14), (9, 11), (10, 11), (14, 15), (15, 16), (15, 17), (15, 37), (16, 42), (40, 48), (49, 51), 
(89, 91), (90, 92), (91, 94), (91, 97), (92, 103), (92, 105), (123, 124), (126, 157), (126, 
158), (126, 169), (127, 168), (129, 130), (130, 132), (130, 168) and (158, 160). 

Pairs of damaged buses [z, z] where bus z must be repaired before starting repair 
on bus V: [1, 2], [2, 3], [3, 4], [4,7], [20, 21] and [22, 125]. 

Pairs of damaged lines where line {i,j) must be repaired before 

starting repair on line {i'J'): [(1, 5), (2, 3)], [(2, 3), (2, 8)], [(2, 8), (4, 16)], [(2, 3), (3, 

19)], [(3, 19), (4, 16)] and [(3, 19), (15, 37)]. 

3. Scenario with 12% of Components Damaged 

Damaged buses: 1, 2, 3, 4, 5, 6, 7, 9, 13, 17, 19, 20, 21, 22, 34, 35, 62, 69, 77, 79, 
80, 123, 124, 125, 126, 130, 134, 135, 144, 151, 158, 167, 170, 190, 193 and 197. 
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Damaged lines {ij): (1, 5), (2, 3), (2, 8), (3, 19), (4, 16), (5, 9), (7, 131), (8, 11), 
(8, 14), (9, 11), (10, 11), (14, 15), (15, 16), (15, 17), (15, 37), (16, 42), (40, 48), (47, 113), 
(48, 107), (49, 51), (89, 91), (90, 92), (91, 94), (91, 97), (92, 103), (92, 105), (122, 125), 
(122, 157), (123, 124), (126, 127), (126, 157), (126, 158), (126, 169), (127, 134), (127, 

168) , (128, 133), (129, 130), (130, 132), (130, 168), (133, 137), (135, 136), (154, 156), 
(155, 161), (157, 159), (158, 160), (163, 164), (167, 169), (194, 219) and (195, 219). 

Pairs of damaged buses [z, i ] where bus i must be repaired before starting repair 
on bus V: [1, 2], [2, 3], [3, 4], [4,7], [19, 20], [20, 21], [21, 22.], [125, 126] and [126, 

130]. 

Pairs of damaged lines where line {i,j) must be repaired before 

starting repair on line {i'J'): [(1, 5), (2, 3)], [(2, 3), (2, 8)], [(2, 8), (4, 16)], [(2, 3), (3, 

19)], [(3, 19), (4, 16)], [(3, 19), (15, 37)], [(15, 37), (40, 48)], [(133, 137), (154, 156)] and 
[(133, 137), (155, 161)]. 

4. Scenario with 16% of Components Damaged 

Damaged buses: 1, 2, 3, 4, 5, 6, 7, 9, 13, 17, 19, 20, 21, 22, 27, 34, 35, 62, 69, 77, 
79, 80, 97, 123, 124, 125, 126, 130, 133, 134, 135, 136, 137, 144, 151, 158, 167, 170, 
172, 173, 174, 181, 182, 186, 187, 190, 193 and 197. 

Damaged lines (1, 5), (2, 3), (2, 8), (3, 19), (4, 16), (5, 9), (7, 131), (8, 11), 
(8, 14), (9, 11), (10, 11), (14, 15), (15, 16), (15, 17), (15, 37), (16, 42), (40, 48), (45, 74), 
(47, 113), (48, 107), (49, 51), (89, 91), (90, 92), (91, 94), (91, 97), (92, 103), (92, 105), 
(122, 125), (122, 123), (122, 157), (123, 124), (126, 127), (126, 157), (126, 158), (126, 

169) , (127, 134), (127, 168), (128, 133), (129, 130), (130, 132), (130, 168), (133, 137), 

(134, 135), (135, 136), (136, 137), (136, 152), (145, 146), (145, 149), (152, 153), (154, 

156), (154, 183), (155, 161), (157, 159), (158, 160), (162, 164), (162, 165), (163, 164), 

(165, 166), (167, 169), (184, 185), (190, 231), (194, 219), (195, 212), (195, 219), (197, 

198) and (197, 211). 

Pairs of damaged buses [z, z] where bus z must be repaired before starting repair 
on bus V: [1, 2], [2, 3], [3, 4], [4,7], [19, 20], [20, 21], [125, 126], [126, 130], [134, 135], 
[135, 136], [136, 137] and [190, 193]. 
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Pairs of damaged lines {{ij), (i', 7 ')] where line {i,j) must be repaired before 
starting repair on line {i'J'): [(1, 5), (2, 3)], [(2, 3), (2, 8)], [(2, 8), (4, 16)], [(2, 3), (3, 

19)1, [(3, 19), (4, 16)1, [(3, 19), (15, 37)], [(15, 37), (40, 48)], [(133, 137), (154, 156)], 
[(133, 137), (155, 161)], [(145, 146), (154, 156)], [(154, 156), (157, 159)], [(154, 156), 
(165, 166)] and [(190, 231), (194, 219)]. 

5. Scenario with 20% of Components Damaged 

Damaged buses: 1, 2, 3, 4, 5, 6, 7, 9, 13, 17, 19, 20, 21, 22, 27, 34, 35, 62, 69, 77, 
79, 80, 97, 123, 124, 125, 126, 130, 133, 134, 135, 136, 137, 144, 151, 158, 167, 170, 

172, 173, 174, 181, 182, 186, 187, 190, 193, 197, 198, 201, 202, 204, 206, 207, 209, 211, 
212, 222, 236 and 241. 

Damaged lines (1, 5), (2, 3), (2, 8), (3, 19), (4, 16), (5, 9), (7, 131), (8, 11), 
(8, 14), (9, 11), (10, 11), (14, 15), (15, 16), (15, 17), (15, 37), (16, 42), (40, 48), (45, 74), 
(47, 113), (48, 107), (49, 51), (89, 91), (90, 92), (91, 94), (91, 97), (92, 103), (122, 123), 
(122, 125), (122, 157), (123, 124), (126, 127), (126, 157), (126, 158), (126, 169), (127, 

134), (127, 168), (128, 133), (129, 130), (130, 132), (130, 168), (133, 137), (134, 135), 

(135, 136), (136, 137), (136, 152), (145, 146), (145, 149), (152, 153), (154, 156), (154, 

183), (155, 161), (157, 159), (158, 160), (162, 164), (162, 165), (163, 164), (165, 166), 

(167, 169), (184, 185), (190, 231), (194, 219), (195, 212), (195, 219), (197, 198), (197, 

211), (198, 203), (201, 204), (203, 211), (204, 205), (206, 207), (206, 208), (212, 215), 

(213, 214), (214, 215), (216, 217), (219, 237), (220, 221), (242, 245), (242, 247), (244, 

246) and (245, 247). 

Pairs of damaged buses [z, i ] where bus i must be repaired before starting repair 
on bus i': [1, 2], [2, 3], [3, 4], [4,7], [13, 17], [19, 20], [20, 21], [22, 125], [123, 124], 

[125, 126], [126, 130], [134, 135], [135, 136], [172, 173] and [172, 174]. 

Pairs of damaged lines [{i,j), {i'J')] where line (ij) must be repaired before 
starting repair on line {i'jy. [(1, 5), (2, 3)], [(1, 5), (133, 137)], [(2, 3), (2, 8)], [(2, 8), (4, 
16)], [(2, 3), (3, 19)], [(3, 19), (15, 37)], [(4, 16), (5, 9)], [(15, 37), (40, 48)], [(133, 137), 
(135, 136)], [(133, 137), (154, 156)], [(145, 146), (154, 156)], [(154, 156), (157, 159)], 
[(162, 164), (162, 165)], [(162, 164), (163, 164)] and [(190, 231), (194, 219)]. 
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C. BUS REPAIR-RESOURCE REQUIREMENTS AND REPAIR TIMES 

The table below shows the respeetive number of units of repair-resouree rl, r2 or 
r2 required to repair eaeh damaged bus, if that resource type is utilized for the repair, and 
the corresponding repair times. 


Bus 

Number of units of rl, r2 and r3 
required for repair, if rl, r2 or 
r2 are selected, respectively 

Repair time if using rl, r2 or r3 
for repair (days) 


rl 

r2 

r3 

rl 

r2 

r3 

1 

1 

2 

3 

3 

2 

1 

2 

1 

2 

3 

3 

2 

1 

3 

1 

2 

3 

3 

2 

1 

4 

1 

2 

3 

3 

2 

1 

5 

1 

2 

3 

3 

2 

1 

6 

1 

2 

3 

3 

2 

1 

7 

1 

2 

3 

3 

2 

1 

9 

1 

2 

3 

3 

2 

1 

13 

1 

1 

1 

1 

1 

1 

17 

1 

1 

1 

1 

1 

1 

19 

1 

1 

1 

1 

1 

1 

20 

1 

1 

1 

1 

1 

1 

21 

3 

1 

2 

2 

1 

3 

22 

3 

1 

2 

2 

1 

3 

27 

3 

1 

2 

2 

1 

3 

34 

3 

1 

2 

2 

1 

3 

35 

3 

1 

2 

2 

1 

3 

62 

1 

2 

3 

3 

2 

1 

69 

1 

2 

3 

3 

2 

1 

77 

1 

1 

1 

1 

1 

1 

79 

1 

1 

1 

1 

1 

1 

80 

1 

1 

1 

1 

1 

1 
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Bus 

Number of units of rl, r2 and r3 
required for repair, if rl, r2 or 
r2 are selected, respectively 

Repair time if using rl, r2 or r3 
for repair (days) 


rl 

r2 

r3 

rl 

r2 

r3 

201 

3 

1 

2 

2 

1 

3 

202 

3 

1 

2 

2 

1 

3 

204 

3 

1 

2 

2 

1 

3 

206 

3 

1 

2 

2 

1 

3 

207 

3 

1 

2 

2 

1 

3 

209 

3 

1 

2 

2 

1 

3 

211 

3 

1 

2 

2 

1 

3 

212 

3 

1 

2 

2 

1 

3 

222 

1 

2 

3 

3 

2 

1 

236 

3 

1 

2 

2 

1 

3 

241 

3 

1 

2 

2 

1 

3 


D, LINE REPAIR-RESOURCE REQUIREMENTS AND REPAIR TIMES 

The table below shows the respeetive number of units of repair-resource rl, r2 or 
r2 required to repair each damaged line, if that resource type is utilized for the repair, and 
the corresponding repair times. 


Line 

Number of units of rl, r2 and 
r3 required for repair, if rl, r2 
or r3 are selected, respectively 

Repair time if using rl, r2 or r3 
for repair (days) 


rl 

r2 

r3 

rl 

r2 

r3 

1,5 

3 

2 

1 

1 

2 

3 

2,3 

3 

2 

1 

1 

2 

3 

2,8 

3 

2 

1 

1 

2 

3 

3, 19 

1 

1 

1 

1 

2 

3 

4, 16 

1 

1 

1 

1 

1 

1 

5,9 

1 

1 

1 

1 

1 

1 
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Number of units of rl, r2 and 
r2 required for repair, if rl, r2 
or r2 are selected, respectively 


Repair time if using rl, r2 or r2 
for repair (days) 





167, 169 
184, 185 
190, 231 

194.219 
195,212 

195.219 
197, 198 

197.211 

198.203 

201.204 

203.211 
204, 205 
206, 207 
206, 208 
212,215 

213.214 

214.215 
216,217 

219, 237 

220, 221 
242, 245 
242, 247 

244, 246 

245, 247 


Number of units of rl, r2 and 
r2 required for repair, if rl, r2 
or r2 are selected, respectively 


Repair time if using rl, r2 or r2 
for repair (days) 
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APPENDIX C. DATA FOR TERRORIST-ATTACK SCENARIOS 


A. REPAIR-RESOURCE AVAILABILITY 

Six units of rl and five units of r2 are introdueed into the pool of available repair- 
resourees at the start of the first time-period, and six units of r3 are introdueed during the 
start of the seeond period. 

B, LIST OF DAMAGED BUSES AND LINES 

1, Scenario with 4 Components Damaged 

Damaged buses: 5 and 11. 

Damaged lines {ij): (6, 7), and (10, 11). 

2, Scenario with 8 Components Damaged 

Damaged buses: 5, 11, 17 and 37. 

Damaged lines (3, 4), (6, 7), (10, 11) and (23, 24). 

3, Scenario with 12 Components Damaged 

Damaged buses: 5,11, 17, 37, 84 and 92. 

Damaged lines (3, 4), (6, 7), (10, 11), (23, 24), (35, 36) and (45, 46). 

4, Scenario with 16 Components Damaged 

Damaged buses: 5, 11, 17, 37, 84, 92, 108 and 124. 

Damaged lines (3, 4), (6, 7), (10, 11), (23, 24), (35, 36), (45, 46), (81, 88) 
and (85, 99). 

5, Scenario with 20 Components Damaged 

Damaged buses: 5, 11, 17, 37, 84, 92, 108, 124, 143 and 152. 

Damaged lines (3, 4), (6, 7), (10, 11), (23, 24), (35, 36), (45, 46), (81, 88), 
(85, 99), (117, 159) and (133, 171). 
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C. BUS REPAIR-RESOURCE REQUIREMENTS AND REPAIR TIMES 

The table below shows the respeetive number of units of repair-resouree rl, r2 or 
r2 required to repair eaeh damaged bus, if that resource type is utilized for the repair, and 
the corresponding repair times. 


Bus 

Number of units of rl, r2 and r3 
required for repair, if rl, r2 or 
r2 are selected, respectively 

Repair time if using rl, r2 or r3 
for repair (days) 


rl 

r2 

r3 

rl 

r2 

r3 

5 

1 

2 

3 

3 

2 

1 

11 

1 

1 

1 

1 

1 

1 

17 

1 

1 

1 

1 

1 

1 

37 

3 

1 

2 

2 

1 

3 

84 

3 

1 

2 

2 

1 

3 

92 

3 

1 

2 

2 

1 

3 

108 

3 

1 

2 

2 

1 

3 

124 

1 

2 

3 

3 

2 

1 

143 

3 

1 

2 

2 

1 

3 

152 

3 

1 

2 

2 

1 

3 
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D, LINE REPAIR-RESOURCE REQUIREMENTS AND REPAIR TIMES 

The table below shows the respective number of units of repair-resource rl, r2 or 
r3 required to repair each damaged line, if that resource type is utilized for the repair, and 
the corresponding repair times. 


Line 

Number of units of rl, r2 and 
r2 required for repair, if rl, r2 
or r2 are selected, respectively 

Repair time if using rl, r2 or r3 
for repair (days) 


rl 

r2 

r3 

rl 

r2 

r3 

3,4 

1 

2 

3 

3 

2 

1 

6,7 

1 

1 

1 

1 

1 

1 

10, 11 

3 

1 

2 

2 

1 

3 

23,24 

3 

1 

2 

2 

1 

3 

35,36 

3 

1 

2 

2 

1 

3 

45,46 

1 

1 

1 

1 

1 

1 

81, 88 

3 

1 

2 

2 

1 

3 

85,99 

3 

1 

2 

2 

1 

3 

117,159 

3 

1 

2 

2 

1 

3 

133,171 

1 

2 

3 

3 

2 

1 
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APPENDIX D. BENDERS DECOMPOSITION ALGORITHM 


This section describes the Benders Decomposition Algorithm for solving RECOP. 
(The notation i9(-) refers to the optimal objective-function value of the problem in the 
argument.) We use a modified form of Benders decomposition where we solve the 
relaxed master problem (RMP) in most iterations k, and solve the true master problem 
only once out of every ten iterations. As RMP solves much faster than MP, and the cuts 
derived from RMP are valid, this technique improves the convergence rate of the lower- 
bound. The algorithm follows. 

Input: Initial solution Xq obtained from HS-RECOP, matrices B and C, vectors c, 
c' and d, and an optimality tolerance f > 0. 

Output: Recovery plan, x* and associated power flows, generation levels, phase 
angles, and load shedding, jointly denoted asy*. 

1. Set the iteration counter k := 0, the lower bound (EB) := -oo, and the upper 
bound (UB) := +oo. 

2. Solve (SP^(Xj)) for and . 

3. If A: is a multiple of 10, let UB^ := -cx+cyj^. If UB^. < UB , then update the 
upper bound: UB := UB^., and set x* := x^.. 

4. If UB-EB < £, STOP; otherwise, continue to step 5. 

5. Add the newly generated cut to (MP^^j): z . 

6. Set k:= k+ 1. 

7. If A: is a multiple of 10, solve (MPk) for and set z^ := z?(MPj.) ; otherwise, 
solve the relaxed master problem (RMP/t) for and set z^ := z?(RMP^) . 

8. If Zj. > EB, set EB := z^ . 

9. Return to step 2. 
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